From 8f593495f488cb33022567f18969b82d5fdedc25 Mon Sep 17 00:00:00 2001 From: elsapet Date: Thu, 30 May 2024 11:02:00 +0200 Subject: [PATCH] Update rules/python/lang/weak_password_hash_argon2.yml Co-authored-by: David Roe --- rules/python/lang/weak_password_hash_argon2.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/python/lang/weak_password_hash_argon2.yml b/rules/python/lang/weak_password_hash_argon2.yml index 07ea213a..2602704d 100644 --- a/rules/python/lang/weak_password_hash_argon2.yml +++ b/rules/python/lang/weak_password_hash_argon2.yml @@ -55,7 +55,7 @@ metadata: - **Do not** override the Argon2 type when implementing the argon2-cffi hashing library. ```python - ph = PasswordHasher(Type.I) // unsafe + ph = PasswordHasher(Type.I) # unsafe hash = ph.hash(user.password) ``` - **Do** rely on the default Argon2 type (Argon2id) as it is the most secure. This ensures the highest level of security for password storage.